Path traversal

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the image-relocator module...

Unbreakable Enterprise kernel security update

4.14.35-2047.519.2.1 - xfs: trim IO to found COW extent limit Eric Sandeen Orabug: 34765284 - xfs: don't use delalloc extents for COW on files with extsize hints Christoph Hellwig Orabug: 34765284 4.14.35-2047.519.2 - Revert 'xfs: don't use delalloc extents for COW on files with extsize hints'...

Unbreakable Enterprise kernel-container security update

4.14.35-2047.519.2.1.el7 - xfs: trim IO to found COW extent limit Eric Sandeen Orabug: 34765284 - xfs: don't use delalloc extents for COW on files with extsize hints Christoph Hellwig Orabug: 34765284 4.14.35-2047.519.2 - Revert 'xfs: don't use delalloc extents for COW on files with extsize hints...

NewStart CGSL MAIN 6.02 : kernel Vulnerability (NS-SA-2022-0099)

The remote NewStart CGSL host, running version MAIN 6.02, has kernel packages installed that are affected by a vulnerability: - In the Linux kernel before 5.4.16, a race condition in tty-discdata handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824...

Design/Logic Flaw

A vulnerability has been identified in Parasolid V34.0 All versions = V34.0.252 = V34.1.242 = V35.0.170 V35.0.184, Simcenter Femap All versions V2023.1. The affected application contains an out of bounds read past the end of an allocated structure while parsing specially crafted XT files. This...

Microsoft Word 安全漏洞

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. An information disclosure vulnerability exists in Microsoft Word, which can be exploited by attackers to obtain sensitive information...

CVE-2020-12509

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module...

Path traversal

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module...

CVE-2020-12509 s::can moni::tools prone to path traversal in camera-file module

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module...

CVE-2020-12509

CVE-2020-12509 affects s::can moni::tools prior to version 4.2. A path traversal vulnerability in the camera-file module allows an unauthenticated attacker to obtain arbitrary files from the device. Connected sources (Red Hat security advisory, CNNVD, PT Security) corroborate the issue and specif...

CVE-2020-12508 s::can moni::tools prone to path traversal in image-relocator module

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the image-relocator module...

CVE-2020-12508 s::can moni::tools prone to path traversal in image-relocator module

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the image-relocator module...

CVE-2020-12508

CVE-2020-12508 affects s::can moni::tools prior to version 4.2. A path-traversal flaw in the image-relocator module allows an unauthenticated attacker to obtain arbitrary files from the device. This vulnerability exposes confidential data (CVE score 7.5, HIGH) and is evidenced in multiple sources...

CVE-2020-12507

Summary: CVE-2020-12507 affects s::can moni::tools prior to version 4.2. An authenticated attacker could trigger a SQL injection to gain full access to the database, with potential impacts to confidentiality, integrity, and availability. The Red Hat, NVD, CVE List, and other entries concur on the...

CVE-2020-12507 s::can moni::tools autheticated SQL injection

In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection. This may result in loss of confidentiality, loss of integrity and DoS...

s::can moni::tools 路径遍历漏洞

s::can moni::tools is a platform from s::can for managing a virtually unlimited number of sites, online probes, analyzers, and parameters. A path traversal vulnerability exists in s::can moni::tools version 4.2 and earlier. An attacker can exploit this vulnerability to obtain any file...

CVE-2022-2741

The denial-of-service can be triggered by transmitting a carefully crafted CAN frame on the same CAN network as the vulnerable node. The frame must have a CAN ID matching an installed filter in the vulnerable node this can easily be guessed based on CAN traffic analyses. The frame must contain th...

Code injection

The denial-of-service can be triggered by transmitting a carefully crafted CAN frame on the same CAN network as the vulnerable node. The frame must have a CAN ID matching an installed filter in the vulnerable node this can easily be guessed based on CAN traffic analyses. The frame must contain th...

CVE-2022-2741 can: denial-of-service can be triggered by a crafted CAN frame

The denial-of-service can be triggered by transmitting a carefully crafted CAN frame on the same CAN network as the vulnerable node. The frame must have a CAN ID matching an installed filter in the vulnerable node this can easily be guessed based on CAN traffic analyses. The frame must contain th...

CVE-2022-2741

CVE-2022-2741 affects Zephyr (CAN networking). A DoS can be triggered by sending a specially crafted CAN frame on the same CAN network, where the frame’s CAN ID matches an installed filter on the vulnerable node and the frame’s RTR bit is the opposite of what the filter expects. The vulnerability...